properly quote filenames and eliminate silly escaping