fix: properly escape params passed to exec

fix: properly escape params passed to exec #45