I say allow any character that has a use-case.  So that would be everything > 0x20.  If we ever need the control characters they will be trivial to add.