2.67 is out

[Karel]

After an intermediate 2.66 fix - here's 2.67. This version fixes the start and control script "xrctl" in that all arguments to the XR invocation are "shell-escaped" when necessary. Mainly this will be relevant for host- or url match flags which are likely to contain regex-characters that the shell interpreter doesn't like.