0.1.1: use a restricted bash shell by default