The Murky Issue of Changing Process Identity: Revising "Setuid Demystified"