Escape variables by default

Fixes #192