@ckure Very related: This is why you always should exec a list, not a string (which gets interpreted by a shell). Same basic hygiene as parametrized SQL.