Automatically ensure we don't write software that does unsafe .desktop files lookup

grep the code that we run as amnesia but privileged for usage of gtk-launch, Gio.DesktopAppInfo.new, anything that will look in ~/.local/share/applications/

We expect this will be a LHF.