ISSUE #3480 add test for non-reversable auth escaping

Test against 2 known-bad strings
Test against 100 random strings