test: use `command` instead of `env` to bypass Bash’s built-ins