pub const MH_ROOT_SAFE: u32 = 0x0004_0000;
When this bit is set, the binary declares it is safe for use in processes with uid zero