This is already enforced by `shell()`