Implement a more secure way to use exec, system and shell_exec

Use a similar approach as we have with database queries (placeholders and argument list that automatically gets quoted).