difftool: don't assume that default sh is sane