Comment 10 for bug 1308146

The problem is even though we *do* escape $ and . for service settings stored in the settings collection, we don't do the same for charm config stored in the charms collection (either uploaded locally or from the charm store). I'm afraid this has been an issue ever since I introduced API for uploading charms, so I'm assigning this to myself and will propose a fix which does proper escaping.