hosting/customer_service: implement more systemd escaping rules