Use sh instead of ash in xacml-pdp