handle EINTR specially so that debuggers can re-attach unintrusively
replace stupid stat check with mode check
unexport TU local routine
fail if uid/euid is 0 for security
update documentation
add documentation in ctx.c and lint includes
add TODO for final build variant