Yes, I got your security point. And I have seen that too in my code if I load the file and get the values using $KEY sign, the command gets executed at that point of time which I don't want to.
That's why I changed my code and 'grep'ing line by line to read the values.
But in this approach I can't execute the value as a Unix command.
Is this doable or I am doing something very wrong?