Properly escape filenames