fixes #3160 - sanitize host/host group names in lookup_value associations (CVE-2013-4386)