At least in v1.x: primary keys are just concatenated to the URLs (after a slash, to start a new segment) without any encoding.
I had some values with # character in them, resulting in pretty funny behavior, sometimes even finding the wrong record for the prefix.
This means there are a number of characters that must not be used in primary keys with Grocery CRUD (at least v1.x) as of now.