Quote credentials during DB backup

Previously the strings were unquoted and symbols like (-, were treated
as command line separators or anything like that.