main/haserl: allow suid binary