Use escapeshellarg for all shell arguments

My main reason for this request is to support passwords containing a double quotation mark ("), but using escapeshellarg for all shell arguments is generally a good practice.