diff --git a/letsencrypt/plugins/manual.py b/letsencrypt/plugins/manual.py
index f19861d9d..65d7d6876 100644
--- a/letsencrypt/plugins/manual.py
+++ b/letsencrypt/plugins/manual.py
@@ -133,7 +133,7 @@ binary for temporary key/certificate generation.""".replace("\n", "")
             if sys.platform == "darwin":
                 executable = "/bin/bash"
             else:
-                executable = "/bin/sh"
+                executable = None
                 
             try:
                 self._httpd = subprocess.Popen(
diff --git a/letsencrypt/plugins/standalone/authenticator.py b/letsencrypt/plugins/standalone/authenticator.py
index cdf9a6f04..a9972fba2 100644
--- a/letsencrypt/plugins/standalone/authenticator.py
+++ b/letsencrypt/plugins/standalone/authenticator.py
@@ -309,7 +309,7 @@ class StandaloneAuthenticator(common.Plugin):
             net_connections = psutil.net_connections()
         except psutil.AccessDenied as error:
             logger.info("Access denied when trying to list network "
-            "connections: %s. Are you root?", error)
+                        "connections: %s. Are you root?", error)
             # this function is just a pre-check that often causes false
             # positives and problems in testing (c.f. #680 on Mac, #255
             # generally); we will fail later in bind() anyway