my point is: if we give people freedom to write in whatever they want, we shouldn't try to use "/bin/sh" anyway