luci-base: fix possible shell injection in luci.tools.status.switch_status()