utility: add shell_escape. we will be using this soon to escape
strings before they are sent to the shell.