atd: add "batch" to the list of programs that need a setuid wrapper