ROOT_UGID
ensure_user_exists(ROOT_UGID);
ensure_group_exists(ROOT_UGID);
test_setuid(ROOT_UGID, false);
test_setgid(ROOT_UGID, false);
gid_t disallowed_supp_groups[2] = {ROOT_UGID, NO_POLICY_UGID};