Add asbox

i think we can delay the `Setuid` until just before the `exec()`