But the blunt instrument they’re using to detect this is to disallow any non-async-signal-safe syscall after fork