subprocess: Always force shell=False

Signed-off-by: Michael Buesch <m@bues.ch>