resolve http://bugs.debian.org/600304 -- do not place arbitrary/escaped user ids...