kickstart: Assume we are dealing with UTF-8

If the application outputs UTF-8, then all we need to do
is escape a few of the ASCII characters that are not valid
in XML strings, such as &, ', ", <, and >. Everything else
can be passed through to the output unmodified.