Improve execsh() and don't allow anonymous shells