This needs to be done more safely, i.e. use multiple arguments to so that the shell isn't involved. Use Fig::ExternalProgram; see the usage of this class in Fig::RepositoryPackagePublisher#run_version_control_command().