Redmine 6523: Avoid read/write access to Setuid storage

Yep, that's the risk if you modify the SETUID/SETGID for each file you operate on in your file-selection. I think it's a acceptable hit for the 1% use case.