Changes

This will enable <tt>\write18</tt> support per <tt>texexec</tt> job, and not system-wide. An administrator would therefore only have to worry about malicious ConTeXt code, and not about other TeX systems running. With the second modification, you can leave the <tt>shell_escape</tt> line in <tt>texmf.cnf</tt> commented out/false.