don't pass untrusted input to the shell :(, use the new path for the carddb
also ignore *~