mysql doesn't support arrays so IN requires many '?' and flatten values