prevent creation of invalid chars in safe code

[thestinger]

An incomplete list of holes:

• the as conversion from integers larger than 21 bits needs to be removed
• surrogate characters need to be blacklisted

[thestinger]

Nominating for the backwards compatible milestone.

[catamorphism]

Visiting for bug triage. We'll get here!