Add a util/exec interface for testing execs.

Peeled off from ip-per-service
ExitError is an alias of *os.ProcessState.

os.ProcessState has no public fields.

Thus, I can not mock exec errors.  Sigh.  Go's library is very nice in some regards and totally untestable in others.