if you use
auth-user-pass-verify <script> via-file
then this should not occur; if you are using 'via-env' then it is normal (and mandatory!) that characters such as '$' get mapped, as otherwise there's a security risk on the server side with dangerous environment variables.
