SUID and SGID security concern