because it's unsigned, but I don't really want to rely on uid_t being unsigned on every platform this code might propagate to.