privilege-dropping exec-er in the spirit of setuidgid