use shell for lxc-start exec