rustix
libc
`rustix` and `libc` are already in the dependency tree, and `rustix` follows IO safety rules, so use those. We can use a pipe to get the PID of the double-forked process.
refactor(applet): connect to privileged socket if available cleanup