ActiveRecord::Base.sanitize takes care of quoting too