One more shellescape required

Additional change for security fixes.  Deploy problems with v127 were discovered in production and not in staging.  Verify staging first.

/cc @zendesk/samson

### TODO

- [x] refactor model with additional shellescape()

### RISKS
- verify that legal messages and strings don't break due to new shell escaping code