Call clean_fname() in sanitize_path() to catch some more strange but