hush: do not use ps -o in leak_argv1; do not hardcode path in negate