> And every other suggestion also doesn't work if the attacker can just replace the shell.