forbid shell expansion