make NameConfig::getSafeString conservative