use shell execution for password eval