use shell provider for easy-rsa commands