mac os sign script: quote all params