run-command: Allow stderr to be a caller supplied pipe