avoid malloc of potentially-large string in wordexp