Make tbtacl safer to use with untrusted input

[benley]

This is mostly just the result of running shellcheck and following its advice.