secure_filename normalizes the encoding for us ([impl](https://github.com/mitsuhiko/werkzeug/blob/master/werkzeug/utils.py#L247))