Horizon escapes special characters in openrc.sh

Adding the safe filter makes it possible to have tenant names with
special charaters rendered into the openrc.sh file without escaping
those characters.

Added a new unittest for templates

Change-Id: I56ec047da467b721bd1b57d2c97d05717e83f468