security hardening: ensure suid programs have valid stdin/out/err