allow sqlalchemy to substitute parameters in raw statements

[bhearsum]

In #3013 @gabrielbusta pointed out that it's not possible to defer parameter substitution in raw queries -- we must provide the full, finalized statement to execute. Although we don't use raw queries often, we should still allow for proper parameterization of them.