Security fixes:

* Strip lookup calls out of inventory variables and clean unsafe data
  returned from lookup plugins (CVE-2014-4966)
* Make sure vars don't insert extra parameters into module args and prevent
  duplicate params from superseding previous params (CVE-2014-4967)
Version bump for release 1.6.7
Fix ec2_setup task param quoting
Fixing up shell quoting issues
Version bump for release 1.6.8
fix for unarchive 8257
Add a lot of tests to verify parsing routines for scenarios that should pass.  Some changes TBD, like stripping command spaces off end of expressions.
Add some negative tests on the same parsing infrastructure.
Add missing role test file.
Add missing file.
Fixes to parsing tests to remove trailing space
Fixes for module param counting and additional shell quoting issues
Make sure 'item' variable is set when using first_available_file

Fixes #8220
Using custom splitting function for module param counting
Some notes/comment upgrades on split_args.
Start of unit tests for split_args function, moved split_args to utils since not needed by modules (so far).
Moar split_args tests
Add another negative test for the parser logic.
Refactoring split_args into sub-functions
Smush ds removal