looks like shell expansion can be abused to enter arguments to some programs.