escaping bash, correctly this time