Makes sanitizer pluggable

On some devices with SCP support (cisco IOS for example) the target file needs to be "flash:/filename" which is in the default sanitizer.  Since this is sane in *most*, if not all cases, make the sanitizer injectable during instantiation instead of reaching into the module and monkey patching it.

Had to move _sh_quote to the top due the symbol lookup being unavailable.