Sanitise the group character as well

This actually matters for the & group.