naive implementation of sudo and possibly insecure setuid support