shellout always runs a system command

- dry runs are detected beforehand