Does Authbind's helper really need setuid root, or can it run with the CAP_NET_BIND_SERVICES capability and still work?
Principle of least privilege: Does Authbind helper really need setuid root, or can it run with cap_net_bind_services?
linux;setuid;capabilities;authbind