not sanitizing commands to execute, since we actually want to exec that parameter