move the setuid wrapper binary into its own folder