Uses shellescape for serializing options for `env`

Prevents environment variables containing double-quotes from breaking
commandlines when shelling out.