protocol-native: hex encode invalid SEC_LABEL

When the sec label contains invalid chars, hexencode it to avoid
causing problems with invalid strings later.