use shell for openswan status callback script