pub fn cmdline_haystack(process_cmd: &str) -> String
The normalized cmdline text a process is matched on: the unwrapped inner command for a shell wrapper, else the cmdline itself.