Piping from an http source directly into sh is not a good idea