Add a #refute_sh negative assertion for sh commands, and specs for it.