plugins/wrms/update.php: escape api data, before pushing to clients