Sanitize sqlite IN statements, use single quotes