move su to optional executables so it is suid