ncm-gip2: untaint file/directory names before calling chown

Fixes #18