Strange Unix behavior dealing with utmp - anyone recognize this?