switch dep to shells/bash instead of explicit bash2; in response to shellshock