Yep.  I need to ensure the permissions on the logfile are correct, and I need root to do that.   There's no way to scope setuid in upstart, it blindly takes effect for all script hooks.   That was my original idea.  (The previous commit in this branch)