Do we know what `ex_args` looks like? We'll need to sanitize it before just sticking into a command, to avoid injection attacks.