escape binary path only if it's executable