Tuned: improper sanitization of `instance_name` parameter of the `instance_create()` method

...