How to sanitize getpass.getuser() for use in directory names on Windows?