avoid shell parsing

%p does not safely escape for shell usage. The array form of system avoids the shell altogether and as such is safer.