env: add support for escaping environment substitutions

hang on.