Escape path queries for SQLite

Fixes #1146
Changelog for #1146 fix
lyrics: musixmatch, disable https verification
lyrics: don't throw when extraction fails
Merge pull request #1161 from Kraymer/lyrics_hotfixes_musixmatch

Musixmatch hotfixes
Apply #1157 by @mluds as patch (fix #1158, #1026)
Encoding and other fixes for #1157

Log as one statement. No need to hold the filesystem lock. New variable name.
No shell execution (#1157)

Now that we do the proper thing, we do not need shell parsing.
Changelog for #1026, #1157, #1158
More robust templating (#1157)

Don't require $source and $dest to be bare tokens.
Fix convert tests

Use some shell trickery to get the pipelined command to work.
Fix 2.6 compatibility with subprocess

We can add this back once we go 2.7-only.