Make util.c:flags() stricter -- don't silently ignore unknown flags