allow backticks in commands, also fix potential exploit, of user running untrusted code hidden in some source