formatting support for `Subprocess::shellify`