quote environment var given to exec