tighten up getopt_long for envoy-exec