support a running time limit on spawned commands

What about `commandTimeout`? That's consistent with us calling the function to run `command`