quote environment variables