escape env variable