Popen -> check_output to avoid leaking pipe FDs