and Theo: - Revoke root privileges early (root needed for pty allocation) - Make it setgid utmp in order to update utmp with root privileges revoked. utmp also revoked if not needed (-u used for ex)
