Use shell, as 'command' may be a builtin.

Loosen argument constraints on mocked Popen
Write configuration correctly under a root account