Simple Go-based setuid+setgid+setgroups+exec