Command contains "sh " or "su "