We should probably use Shellwords.escape for this.
It's part of ths stdlib and will hopefully escape everything correctly :)

I'll change that.