quote password environment variable in case it contains shell metacharacters