I suppose this feature is useful, but a hidden gotcha on SYSV machines is that the kernel doesn't support saved gid's, though SCCS expects it to. There's no security problem with children; p.p_suid is set to u.u_uid upon exec.