Escape DSN param values

Not really a behavior change, since it was mostly broken before