Fix "`&' interpreted as argument prefix" warning in command.rb.

Cherry-pick of c4657940b18dfb3222be9905c1e561a5956d024b.
Fix "@" substitution in command-line arguments.