encode ampersand / double-quote is only other special-case