query service: load schema safety

Add some safety around how we load schema by back-quoting table
names. This will prevent unexpected crashes if a badly-named
table makes it through.