More robust quoting of database identifiers

Note: These aren't database values, those are already using the
appropriate Pyhton DB API method for quoting.
Audit escaping of identifiers in the postgresql_user module
Make sure we quote or confirm good all user provided identifiers
Normalize privs and flags to uppercase so comparisons against allowed names will work