if mpl doesn't get quotes, neither do we

MPL proper uses a slightly different syntax for the secure env vars.  maybe that's why some of the envs are broken?