valgrind: do leak checking, and exit with code 1 on error (not 0)