setuidgid is insufficient (see `man credentials`)