wierd debugging hack: syscalls show up under truss, setuid is root only
various other munging. No progress...
except pushes and pops must match when you are doing call/ret...