So what are the quote parsing rules for libcox, and given an arbitrary string, how do I correctly escape them?

(In the absence of this, and certainly in the absence of official docs/examples that do the right thing, that's a security vulnerability waiting to happen.)