Add :bsexec option to command.run

This should fix #7132: mount dmg image fails if user does not have
StartupItemContext(8).