@@ -61,11 +61,11 @@
 (define configf:cont-ln-rx (regexp "^(\\s+)(\\S+.*)$"))
 
 ;; read a line and process any #{ ... } constructs
 
 (define configf:var-expand-regex (regexp "^(.*)#\\{(scheme|system|shell|getenv|get|runconfigs-get|rget)\\s+([^\\}\\{]*)\\}(.*)"))
-(define (configf:process-line l ht)
+(define (configf:process-line l ht allow-system)
   (let loop ((res l))
     (if (string? res)
 	(let ((matchdat (string-search configf:var-expand-regex res)))
 	  (if matchdat
 	      (let* ((prestr  (list-ref matchdat 1))
@@ -85,13 +85,16 @@
 				   (conc "(lambda (ht)(config-lookup ht \"" sect "\" \"" var "\"))")))
 				((runconfigs-get) (conc "(lambda (ht)(runconfigs-get ht \"" cmd "\"))"))
 				((rget)           (conc "(lambda (ht)(runconfigs-get ht \"" cmd "\"))"))
 				(else "(lambda (ht)(print \"ERROR\") \"ERROR\")"))))
 		;; (print "fullcmd=" fullcmd)
-		(with-input-from-string fullcmd
-		  (lambda ()
-		    (set! result ((eval (read)) ht))))
+		(if (or allow-system
+			(not (member cmdtype '("system" "shell"))))
+		    (with-input-from-string fullcmd
+		      (lambda ()
+			(set! result ((eval (read)) ht))))
+		    (set! result cmd))
 		(loop (conc prestr result poststr)))
 	      res))
 	res)))
 
 ;; Run a shell command and return the output as a string
@@ -117,11 +120,13 @@
     (if targ
 	(or (configf:lookup config targ var)
 	    (configf:lookup config "default" var))
 	(configf:lookup config "default" var))))
 
-(define-inline (configf:read-line p ht allow-processing)
+;; this was inline but I'm pretty sure that is a hold over from when it was *very* simple ...
+;;
+(define (configf:read-line p ht allow-processing)
   (let loop ((inl (read-line p)))
     (let ((cont-line (and (string? inl)
 			  (not (string-null? inl))
 			  (equal? "\\" (string-take-right inl 1)))))
       (if cont-line ;; last character is \ 
@@ -131,11 +136,11 @@
 					 (string-take inl (- (string-length inl) 1))
 					 inl)
 				     nextl))))
 	  (if (and allow-processing 
 		   (not (eq? allow-processing 'return-string)))
-	      (configf:process-line inl ht)
+	      (configf:process-line inl ht allow-processing)
 	      inl)))))
 
 ;; read a config file, returns hash table of alists
 
 ;; read a config file, returns hash table of alists