Mandate double-quoting of vars and command substitutions

This is a good general precaution to take, especially when using
positional arguments.

Change-Id: Id1a6a0bcd1c385ce4383ef3260efc4ef0bc96f74
Merge "Mandate double-quoting of vars and command substitutions"