use sh instead of shlex+subprocess