translate Paths to valid dot-separated MongoDB collection names (Fixes #139)

I think this is a tangling of concerns. The parser shouldn't know or care about "sensitive collections", that should be handled separately in some sort of security checker, which will ultimately have a lot more obligations than just ensuring the user doesn't reference the system table. I'd suggest just parsing anything and we can deal with sensitive collections later.