fix 'su -c cmd user'

this is supposed to work even when user's shell is /bin/false,
so /bin/sh must be used instead.