qa_crowbarsetup, mkcloud: more secure variable handling