Protect the exec some.

Strip out non-alphanumerics to protect against remote code execution.

Not a perfect solution.