note on shellwords and remote command injection