tokio
Avoids either `spawn_blocking`, or potentially blocking call in an async function (though it shouldn't block for long).
rustix
libc
`rustix` and `libc` are already in the dependency tree, and `rustix` follows IO safety rules, so use those. We can use a pipe to get the PID of the double-forked process.
refactor(applet): connect to privileged socket if available cleanup