Single-quotes str for shell embedding, escaping any embedded single quote (POSIX '\'' convention). Safe for arbitrary user data - task param values included, not just our own base64 framing - since nothing inside single quotes is ever reinterpreted.
'\''