kalua: sanitizer: rename alphanumspacedot() to shellsafe() and allow some more chars