fortify: Add protection for strlcat()