hosting: escape usernames going to systemd