How to sanitize getpass.getuser() for use in directory names?