implement a --rollback-after option, useful for speed testing
close the allocated set of descriptors passed to the 'to' endpoint child after forking to run it

this is necessary so that the SSH streams aren't held open (preventing termination in case of error).
add --only option, useful when testing