Merge changes Ic306bb27,I2aa154a9,Ie4e675ca into main

* changes:
  Cope better with errors in child processes
  Add tests using real Gatekeeper
  Test failure arms for auth-bound keys