User.pm: avoid use of shell