Does tectonic support the --shell-escape flag? It is used to do things like syntax highlighting with pygments (using the minted.sty package).