Backport bash security fixes from trunk.
Merge branch 'joyent/feature/miscfix/2012Q4' into joyent/release/2012Q4