Require that query vars are bound

Simplifies smart escape.
Makes it explicit what is a query var and what is an external var.