The sending process needs the net_setid privilege in its effective set to change the user or group ID.
