Being explicit about edge cases

Reference RFC3339 instead of ISO8601. It's available and does the same thing.
Ban nonzero keygroup names and key names. Ban [] in key group names.
Ban other escape sequences.
Give up on floating point behaviour.