qemu: we've not included subprocess in our namespace, so add those in. Somehow the error message got put into the transport cookie, and that blocked migrations...