Support for not setuid-ing tasks that run through thermos_executor