permreduce did not set perms on all goroutines. Since we only need reduction in subprocess execution, use that facility provided by the os package