I don't think putting .shellescaped quoted text inside more quotes is
always sound (it may go into the argument vector over-quoted), but
besides that, we don't use any shell features in the invocation, so
there's no need to start an additional bash process inside the network
namespace at all.
401377d5df