URL-encode keys as well

Often URL parameter keys contain characters which are not allowed in URIs, like square brackets. Those have to be escaped as well.