Pat said it's safer to put the escape in front of $password too