loader now does setuid and setgid