We don't want to give the impression that we allow running arbitrary shell commands under %{exec}, which isn't the case.