Separate Bash command from Maven commands

As part of my development process I like to ask Q to test my code using maven to compile and run the test suite, but Q uses bash to run maven commands, I can trust Q with launch of maven commands but I don't want to trust Q with bash commands because the power on bash commands can be really catastrophic if we are not careful.

If we separate bash from Maven I can trust maven without compromising bash executions.