strlcat() isn't supposed to access *dst past dst_sz