Fixes an issue in SecurityChecker for private items.

Fixes an issue in SecurityChecker causing an illegal argument exception if you try to create a private item because `USER:` contains invalid characters (`:`) for datastore namespaces.  The other issue is that the client library does't accept `[` or `]` in the entity names, so `[private]` and `[public]` are not valid prefixes.