Isn't it safer to provide a full path to the executable, to prevent the user's path from messing with it?