Escape pubkey to prevent local command injection