its kind of fascinating that all this paranoia falls to a shell escaping issue with system().