need to ensure this is on-stack before we strtok_r it