We were using both switch_util_quote_shell_arg and
switch_string_replace without freeing the results even though both
functions malloc.