Comment 11 for bug 1492714

I just think that most of community already agreed to use privilege separation.
In the privsep daemon then, as Kevin notes, we could incrementally remove shell invocation and make it pure-python (I'm not sure if that goal can be achieved at all, but we can incrementally move towards it)