I wonder why "New Identity" wasn't implemented as a fork-and-exec with a newly created profile?