spawn vbox in subshell

  Need to close the fd only for vbox, but not give up the lock too
early