vlock: setgid-binary usr/bin/vlock 2755 root/shadow
