Typo in the _sh_quote regex

'-' is reserved in a character set. It has to be the last character or
else it signifies a range.