Escape SSH_AUTH_SOCK for safe shell eval

Add a new function shell_escape() which unconditionally wraps an entire
string in single quotes, breaking out with '\'' when the string contains
single quotes itself.

Use shell_escape() when printing the shell command for SSH_AUTH_SOCK.

Closes GH-23.