Comment 19 for bug 1313550

gnome-keyring-daemon isn't really a problem because all official images shipping it have installer hooks to restore the flag.

Setting the binary setuid would also be completely wrong as we never want this to run as root, we just want it to have extra ipc locking capabilities. My understanding is that those aren't even entirely required and that it has a fallback mode for systems where the capability isn't set.