quote CGI env variables when needed