Why do the extra forks that `shellcomand` does? Ah, because the parent mustn't chroot. But wouldn't one fork be enough here?