only setuid if root, given that otherwise fails