run_command(): help callers distinguish errors