Fix StringSpec generators to only choose from valid values.

The old almost equivalent syntax gives the same result but can cause the
test to fail if too many invalid values are thrown away.