normalize sql literal to pass sqlite3