properly escape shell args