chown/chgrp clears the setuid/gid bits properly