s4-samr: Escape the username in the LDAP filter