strip nonprinting characters, including unicode, from susceptible input ids

not stripping from tiids and cids right now… they seems safe.  for completeness maybe do this in the future?  not sure.