Docker exec takes either a long shell-like string or a list
of arguments, while the `subprocess.call` we're using on
Heptapod source takes lists only. Technically, we could
forward the `shell` kwarg, but it's better just to use the
list style.