unquote secure strings