hack around ssl connect error
don't involve the shell unnecessarily, making things fragile

Specifically fixes using URLs with reasonably common, valid URL
characters like an ampersand. Avoiding the shell when it isn't needed
seems a better approach than sanitizing or escaping.