Protego: patch for Linux kernel to obviate setuid-to-root binaries