fn sanitize_sh(path: &Path) -> String