Validate executable and state directory paths before rendering the rc.d script so crafted values cannot inject shell syntax. Signed-off-by: Bryan Frimin <bryan@probo.com>