main/man: allow suid group