You're making a wrong asumption about the command passing. The command is sent to the remote host as the single string, so your single quotes are (not) interpretted locally, and your command gets sent as `sh -c cd /no/where && pwd' which is a bit different from you'd expect. If you need to pass the single quotes to the other side, you have to escape them.