We use setuid on OSX only. For additional security we could implement something like this. https://www.safaribooksonline.com/library/view/secure-programming-cookbook/0596003943/ch01s03.html