Ignore cabal sandboxes.
Rewrite insertSelect so that it properly escapes names (fixes #47).