wrap nuget call with cmd.exe calls, do not show api key