Escape file names that contain "&" characters

[cmckendry]

Currently the child process exits with a code 127 when attempting to transfer any files that contain a "&" character. The fix is a trivial change to the file.replace regex.