Maybe shoulda `shellescaped()` the file variable.