archipelago: Avoid shell injection