Implement proxying; disallow sys_write where fd != 1, 2