also don't leak processes, like fs_passwdd