Don't allow unsafe characters in tempfile names