Add fixes for -Wformat-security warnings.

This doesn't allow non-string literals as formats, these may include format specifiers and can cause buffer overruns, maybe. Seen on Ubuntu.