html-escape the arg to the system command