ls: plug a per-argument leak