Html-escape the arg to the system command. Because security.