make sure all shell=False commands use arrays of strings