Embed Notice

Combine that with the wish to have things like audit logs, you’d probably end up with something bug-prone if you were to strace setuid(2) usage with enough contextual information.

(And there’s the thing where setting a non-shell program in /etc/passwd isn’t a restriction but pretty much just a preference where you hope everything respects it)