escape mysql passwords
Use %Q for clarity.