Notes:
PAM for Solaris and some Linux distros
SSH is setuid for: RSH compatibility to use a privileged port
Also, SSH & SSH-signer need SUID to read private host key for trusted host authentication