scan: validate -ve XPG3 specifier