ideally we don’t want to use nc. * shared fd, fifo * lockfile could use a binary but it’s last resort. * We want to run everything in the same user, `ls -lah` should have the same output inside and outside of try, as a non-root user.