fix(lib): use execFile to avoid execing raw strings

Execing raw strings opens us up to remote execution exploits.
Merge pull request #27 from oremj/dont-exec-strings

fix(lib): use execFile to avoid execing raw strings