If a setuid program did this , it would be insecure .
Setuid program 's caller could setuid program it to run arbitrary code and hence setuid program 's its authority .
If a setuid program did this , it would be insecure , because its caller could get it to run arbitrary code and hence misuse its authority .