missing-call-to-setgroups-before-setuid
no-binary
potential-bashisms