sh safer than ./