Spawning services with nothing open at all on the standard I/O fds is way too harsh. We now open /dev/null for them instead.