Why do several binaries installed with NSM agent technology need the setuid permission?