Any way to avoid the SQL bugs and execute raw strings?

[JohnLuck]

sql "INSERT INTO my_table (my_col) values (?)", "my_string"

Also it looks like norm uses the same underlying sql library so I don't think 
it would fix the problem.