use Popen command list for ipexec

rather than constructing a string, which is weird and gross and fragile

replaces #3666