add input validation for NAS-Identifier

Per comments on #406. RFC says it's binary data but I've limited it to printable ASCII (except space character.)