use Popen command list for ipexec

rather than constructing a string, which is weird and gross and fragile

replaces #3666
Merge pull request #3670 from minrk/ipexec-again

use Popen command list for ipexec