bring back the --allow-shadow flag, now that shadow checking is re-implemented
add a success flag to exec results, so we know what happened
cleaning up over-zealous torepr'ing of strings