Run most of the code as root, not the invoking user. It doesn't really

gain us anything to run as the user since an attacker can just have
an setuid(0) in their egg.  Running as root solves potential problems
wrt signalling.

find_path.c

@@ -112,7 +112,6 @@ find_path(infile, outfile)
     path = estrdup(path);
     origpath = path;
 
-    /* XXX use strtok() */
     do {
 	if ((n = strchr(path, ':')))
 	    *n = '\0';