run from single-user mode, as they look at global open file and inflight descriptor counts to check for leaks.