use snprintf in preference to sprintf

Some more paranoid toolchains (e.g. OpenBSD 6.4's default) warn about the use of
sprintf as an insecure function. Our usage is pretty contained, but we rephrase
this to keep such compilers happy.