sh(1): Describe subshell environment, command substitution better