The "posix" provider of the "exec" resource seems to invoke a shell even though the documentation says it doesn't

The `exec` provider now supports commands provided as an array. When the command is an Array of Strings, passed as `[cmdname, arg1, ...]` it will be executed directly(the first element is taken as a command name and the rest are passed as parameters to command with no shell expansion). This is supported for the following exec parameters: comand, onlyif, unless, refresh Example: exec { 'test':   command => ['/bin/echo', '*'],   unless => [['test', '-f', 'filename']], } Note that for` onlyif` and `unless`, because this parameters already accept multiple commands as an array, you need to pass the value as an array of array to take advantage of the new behaviour.