* correctly merge multiple facts results fixes #68532
- also only replace when needed - switched from replace to index - added test to verify bogus_facts are not accepted CVE-2020-10684