Close all unused FDs before execv
Start signal handler after sockets are started
Handle SIGABRT as debugger worthy
Add madvise, exit_group, and *nanosleep to syscall whitelist
Catch bad syscall deaths