krb5-user: setuid-binary