varnishd needs to have fsetid capability