Agreed. Most sysadmins I've encountered do not even realise that binaries like `ping` are actually setuid root. I wouldn't trust them (or myself!) to develop se

Agreed. Most sysadmins I've encountered do not even realise that binaries like `ping` are actually setuid root. I wouldn't trust them (or myself!) to develop security policies.