I assume we aren't supposed to exec arbitrary commands in the production version of this?