wouldn't prepare would improperly quote the field name and and the table name and turn them into string literals?