Clarified data model.
Use Isis's python-gnupg repository.
Properly quote arguments again.

This again prevents shell injection attacks in request strings.

Now, though, every controller will need to assume that the request is
quoted non-transparently.  Ultimately, though, that's a small price to
pay.