don't reset suid/sgid, we can't regain caps otherwise