safe shell for tmux/reattach-to-user-namespace if available