fix major security hole for dm; use vfork, not fork