More robust quoting of database identifiers

Note: These aren't database values, those are already using the
appropriate Pyhton DB API method for quoting.
Audit escaping of identifiers in the postgresql_user module
Make sure we quote or confirm good all user provided identifiers
Normalize privs and flags to uppercase so comparisons against allowed names will work
Correct new function name
Escape mysql identifiers
Fix syntax error
Fix user_add in postgresql_user
Fix user_alter in postgresql_user
Merge pull request #389 from quixoten/fix_postrgres_user

Fix syntax error in postgresql_user
Fix cornercase tracebaxk when detecting whether submodules changed
Add a bare grant to the list of allowed privileges