I'd recommend using https://github.com/gliderlabs/ssh instead, no chance of some shell escape that way.