use setresuid to drop privileges permanently

add write access check

avoid bind_entries over /tmp

directly copy symlink

hardcode dependency binary paths

shortened max line length to 100

source the bashrc

added entries in LD_LIBRARY_PATH

add implementation section

handle multiple relevant /etc/subuid entries

added non-root check to command

create readme

packaged in nix

added some comments

validate fhs_path