Best to be safe with shell escaping: i.e.: https://docs.python.org/2/library/subprocess.html#frequently-used-arguments