deliberately leak that copy, so the cmd functions we call don't
have to worry about strdup'ing individual arguments.