I was getting confused by spaces before. I was thinking they needed to be URL encoded, but they don't.

peterchen's comment shows an example of how to do it properly... you'll see there are space characters in the variable's string value.