The truthful answer is I was being too whitebox in my testing. I knew that the string printed here is the exact one to be executed, so didn't think to write a test because seeing the program name echoed in the `EXPLAIN` told me the escaping worked.

But that's leaning on implementation too much and a true blackbox test'd cover executing some SQL, too. Fixing it.