block uid/gid changes during posix_spawn