crypto: user - ensure user supplied strings are nul-terminated