readlink exe link before setgid/setuid