test: don't depend on package.version remaining stable
add test filter-must-shell-escape