escape a string variable in bash (sh)