Shell escaping once should be sufficient