don't double-escapeshellarg usernames