RUN-PROGRAM: redirect STDERR to a pipe by default