escape env vars also