pbs: refactored, use template for push_raw, quote with shlex for security