- ensure that all system calls go via installer.vim (vundle#installer#system, used to be s:system) - escape/wrap complex command sequences - log commands before trying to execute them