ncm-lcgbdii: untaint file name before calling chown

Fixes #17