Using $(...) and backtick command substitution to run a nested command and splice its output into the current command line, working even when the injection point is mid-argument.