Use run_command(data='') instead of passing unescaped inputs to
a shell.