split of applets setuid vs not setuid