guard unsets

Apparently fails with netbsd's shell. Unsure if that shell is POSIX.
Fix too broad matching of .gitignored files. Closes: #732339
prep release
actually, need to munge input, it may use ./ before filenames