[fix] some exec() didn't have escapeshellarg() as needed