subprocess.popen now works with shell=false