Function shell_quote 

pub fn shell_quote(value: &str) -> String

Status codes and keys are safe by construction, but a device name is whatever somebody typed into it. Everything that could carry a space or a quote goes through this before a shell sees it.