Refactor validator/sanitizer invocation.

* Allow "escape" validator.js sanitizer in lib/validators.js.

* Decompose "runValFun" into different functions so that the
  collection of validator functions for a property is only done when
  the instance is configured, and the collection of async and sync
  results are handled by different functions.