Sanitize null metadata input

Just sanitizing the input part of this PR:  https://github.com/rackerlabs/otter/pull/690
This may call for an audit log event.