/usr/bin/ksu and missing suid bit

[Stefan Lambrev]

Greetings,

What the reason /usr/bin/ksu to be without setuid bit?
Are there any security concerns?
I'm asking because the only way to get ksu working is adding by hand the 
suid bit.
For example when you install heimdal from ports it activate the setuid 
bit on $prefix/bin/su.

And my second question - is there a option that I can define in src.conf 
or make.conf, next time when I build/installworld
ksu to have setuid bit ? (in manual I found only knobs for disabling 
kerberos)

-- 

Best Wishes,
Stefan Lambrev
ICQ# 24134177