SECURITY: quote booleans as string (not integer) in DatabaseMysqlBase