System command followups

- the fake run! should follow the usual case
- enforce valid values for `:stderr` in `run`.  It would probably be cleaner to change `:stderr` to a boolean `:silent_stderr`.