use chpst instead of setuidgid (which would need to be installed)