use the new JMX API to get the overlay profiles for #1477
lets escape dodgy property file keys (like bundle URIs) to avoid exceptions