string format vulnerability in client entry handling.
- remove --without-libtoolfix, since it does not exist; sthen/brad ok sthen@; also tested by Simon Kuhnle
tweaks, looks good steven@; tested by Wiktor Izdebski and Simon Kuhnle