+/* setgroups(0, NULL) succeeds, and drops the gid group
+as well as any supplementary groups */
+#define OS_SETGROUPS_ZERO_DROPS_ALL
+
+/* reads and writes on pipes frequently return EINTR. We provide
+a routine to retry that */
+#define OS_PIPE_RW_EINTR
+