Don't do things that evals all variables. In most cases (e.g. rendering an email
subject), the names of the variables are known and defined. Support only that.

In the original case of the code, there would have been ever only one
placeholder...