Prevent shellcode execution

Shouldn't let users pass code directly to shell invocation. This is safer.