use double quotes in docker run commands so env vars will interpolate