I put a question about this to the OpenShift team and heard back from the developer who added that to the MySQL cartridge in the first place. Even though the code works correctly this way, it is much better practice to use single quotes (') around the --password value. He will actually be making that change to the MySQL cartridge. If you don't mind, please make the same changes here.