bcrypt/setuid are optional