don't cast everything to string in add_file() before passing to escape_and_quote()