[Bug 446164] New: do a security review for setud of /usr/bin/sign