Make CEO non-SUID