Dang AppArmor.  I'll update the PR with that.  I just wanted to do this at the last second possible so that we make sure no extra file descriptors are opened and potentially not closed before it has a chance to exec.  So much for that glorious plan.