fix support for multiple-arguments, string `cmd`

Fixes #95. Thanks @phuongnd08 for the pointer to go-shlex!
one could argue that the var expansion should be done after splitting, but I think this gives more flexibility - a variable can trigger 2 arguments.