Safer shellscripts by default

Just a handful of options to make shellscripts much more failsafe and resilient.