it depends on what you're needing suid for but the first thing id evaluate is if you can just grant a specific CAPAB instead.