Safety: wrap spawn intermediate step in send-to-user to blame appropriate process