Fix security issue (arbitrary file unlink)

This corrects the security issue noted in section 2.8 of [this page](https://defuse.ca/audits/zerobin.htm).