escaping characters in encrypted passwords necessary?