which subprocess we are locking down.

Inspired by Geoff's patch for Solaris, but does not solve the
Solaris problem, only makes it easier to fix.