refname_is_safe(): use skip_prefix()