kill.so: use a safer strncat().