@davehull Not much the devs can do short of making shred set-UID and going at the raw disk devices directly...