Don't use builtin modeline vars.

There are good reasons to disable modelines, so emacs modelines should
remain enabled even if vim's are off.  If you don't want these, remove
the plugin.
Restrict set of characters allowed in filetypes.

In particular, don't allow |, which would be an exploit.