Use shell=False when "run" if possible on Windows
Use shell=False when "run" if possible on Windows

Do a "where" on the command; if it is found, prevent the intermediate
COMSPEC and use CreateProcess directly. Only use shell=True if the command
is not an executable.

This prevents some unexpected behaviour caused by the intermediate shell
process.

kennethreitz/pipenv