Noissue - Improve CMS repository clone command

modules/web/manifests/server.pp

 class web::server(
     $vhost,
     $repository,
     $certificate = hiera('web::server::certificate', 'undef'),
     $private_key = hiera('web::server::private_key', 'undef'),
     $is_default = false,
     $aliases = undef,
     $custom_config = undef,
     $multiplexer_locations = undef,
     $geoip = false,
@@ skipping 81 matching lines @@
     }
   }
 
   user {'www':
     ensure => present,
     comment => 'Web content owner',
     home => '/home/www',
     managehome => true,
   }
 
+  $fetch_cms_cmd = [
+    'hg', 'clone',
+    'https://hg.adblockplus.org/cms/',
+    '/opt/cms',
+  ]
+
   exec {"fetch_cms":
-    command => "hg clone https://hg.adblockplus.org/cms/ /opt/cms",
+    command => shellquote($fetch_cms_cmd),
     path => ["/usr/bin/", "/bin/"],
     require => Package['mercurial'],
     timeout => 0,
     creates => "/opt/cms/.hg/hgrc",
   }
 
   exec {"fetch_repo":
     command => "hg clone -U https://hg.adblockplus.org/${repository} /home/www/${repository}",
     path => ["/usr/bin/", "/bin/"],
     require => Package['mercurial'],
@@ skipping 50 matching lines @@
   )
 
   cron {'update_repo':
     ensure => present,
     command => $update_webpage_cmd,
     user => www,
     minute  => '5-59/20',
   }
 
 }