add some security checks when running SUID root
indentation
use 'dtruss' for process tracing