[525] command_executed, command after token substitution