Protect them from the shell when passing them to configure.
sh regen.sh
afslogsdir=/var/log/openafs afslocaldir=/var/lib/openafs/local \
sh configure \
- CFLAGS=$(CFLAGS) CPPFLAGS=$(CPPFLAGS) LDFLAGS=$(LDFLAGS) \
+ CFLAGS='$(CFLAGS)' CPPFLAGS='$(CPPFLAGS)' LDFLAGS='$(LDFLAGS)' \
--with-afs-sysname=$(SYS_NAME) --disable-kernel-module \
--prefix=/usr --mandir=\$${prefix}/share/man \
--sysconfdir=/etc --libexecdir=/usr/lib --with-krb5 \