Use process redirection rather than herestring for xargs-ing -c

Giving xargs its args on stdin feeds /dev/null to the resulting
command. Using a redirected process as the file to read args from
keeps stdin safe.