core: execute - don't leak strv