Allow for a custom initial buffer

This allows us passing a buffer that escapes tainted strings by default, reducing the risk of us forgetting to escape user input, for example.