superuser security fixes