No need to quote string, since prepare will handle that.