MAINT use subprocess.call, not os.system

The former is safer and faster.