This patch removes fsuser().  Now both suser() and fsuser() are gone and
all permission checks use an appropriate capable() call.