uses correct number of parameters for calls to ActiveRecord::Sanitization.quote_level