Do we have a shell escape  function for this kind of thing? I think OptAddress and OptPort are well validated but this feels naughty nonetheless.