oss: strlcpy is smart enough