*{.sh,run}: stderr_matches calls: don't need to wrap the command in `"try"` because stderr_matches now does this