Do taint checking on command line args. I believe this is correct.
Bill Fenner suggested a simpler fix, but this is my fault if it is broken.
Reactivate -T