pub fn parse(
config: File,
expected: File,
stdin: &[u8],
) -> Result<ProtectedCaptureInputs, &'static str>Expand description
Caller must transfer child-owned fd3/fd4, never borrowed parent descriptors. Restores CLOEXEC on the consumed descriptors before further use; no dup/open of the config path. Public same-UID callers can forge expected inputs.