We only send SIGTERM to our subprocesses in tlclient. We should verify that they exit and send SIGKILL if they refuse. Otherwise we may leave stray crap around, like on bug 5589.