support a running time limit on spawned commands

does `flag.Duration` handle it nicely and reports a meaningful error if you give an invalid duration?