add sanitising of UIDs in Attachment#uid_from. this is an extra service that might be overridden when not required. note that encoding happens ONCE in the lifetime of an attachment and its files: at creation.