Add another example vulnerability class

README.md

@@ -70,6 +70,7 @@ So you can be extra safe. Suppose your program has a dependency with an undiscov
   - Relies on being able to make network calls, so extrasafe can mitigate this by
     - If your program doesn't need network access, don't give it access (but then you aren't really exploitable anyway in most cases)
     - Logging in a separate thread that doesn't have network access
+- Exploits involving executing SUID-root binaries rely on being able to fork and exec.
 
 # Caveats