Add escapeshellarg in exec calls

cf. https://github.com/mattgaidica/brandr/issues/2