add double quotes to prevent globbing