bugfix: quote exec login credentials properly when asking SessionServer