Won't this lose the exit status of the process run as `$app_user`? Perhaps we could use `exec` here.