401377d5df
I don't think putting .shellescaped quoted text inside more quotes is always sound (it may go into the argument vector over-quoted), but besides that, we don't use any shell features in the invocation, so there's no need to start an additional bash process inside the network namespace at all.