Capture stderr (and stdin) to make sure they don't leak