HTML attribute escaping, that can omit quotes if safe to do so.