Make obj_key URL-safe