Harden shell commands Use '--' to separate options and args. Change-Id: Id27566f8baff949382f4954bb34914270e01acc8