using shell words to escape commands