kholtman various improvements, in particular secure handling of untrusted arch… …