places. We have no control over what nss, PAM modules or sudo plugins might do so ignoring SIGPIPE is safest.