return value from 'sanitize' command may be unquoted on non-win32 platform