management: shell out external programs in a more secure way