Use prepared stmt instead of manually quoting when reading

It's safer to let the RDBMS handle quoting so use prepared statements in the `SHOW VARIABLES` query.