This looks unsafe. What if `git = "<somerepo>; rm -rf usr/"?