Running scripts through SQL bombs on optional inputs

[bgharper]

Optional inputs are currently not parsed, whereas for constants at least they should be set to null. Currently optional inputs are left in hashtag format so script execution will error. Other fields are unclear (e.g. saved searches have sql substituted in) are less obvious as to expected behavior and will have to be researched.