Don't shellescape the query for now, to allow flags