We should avoid using `shell` as part of a running Hilary container. `shell` makes the assumption it is running as a shell script that starts, executes, and finishes, and it won't think twice about doing potentially dangerous things to the global `process` object that a server-side API would never think of doing (e.g., changing the `cwd` of the process).