Quote filename when passing it to exec()

File encoding detection will fail if the filename contains space or
whatever shell operator.