refname_is_safe(): insist that the refname already be normalized