Quote args, use Popen with shell=True