subprocess.call para stdout=PIPE is risky