Improved security: explicity mustache vars.