Add tests for command injection of literals
Don't warn on literals interpolated in system calls

and other safe-ish values
Merge pull request #404 from presidentbeef/reduce_command_injection_fps

Reduce command injection false positives