Fix accidental globbing. Successfully caught by the safety changes of the previous commit :)
Quote variable usage. The function is only used internally anyway but its always better to quote stuff.