Use puppet function shellquote for correctly escaping the system commands