escape possible shell args