munin needs to start as root so it can setuid to run the script; it drops privs for everything else and for scripts that don't need root