validation of short-id content
There doesn't seem to be any validation of os short-id content, at least not in the rng. Currently all entries match [a-z0-9.-] which seems a nice default. Particularly the lowercase piece, so suddenly mixed case doesn't start slipping in