This was funny: shell-command-to-string runs on the buffer current
directory; if we were visiting a file with tramp (e.g. as root), then
qdbus would be invoked as root, resulting in kactivitymanager being
spawned as root, resulting in kglobalaccel being spawned as root ⇒
catastrophe!