Per concerto#1082, add shell spec to su commands