machine: escape fields we store in /run, so that they can be properly unescaped by parse_env_file()
update TODO
logind: also escape external data when saving to /run

Better be safe than sorry...