acu152721 use exec su, since setuid is forced on pre-start