run-program leaked a pipe per call