rework SystemExec - use vfork wrapper (and lots of related stuff)