properly escape regex

as the match is trying to catch literal "%{.....}" but "{" and "}"
are actually regex operators, escape properly.

also avoids puppet warnings :)