su: move restricted_shell into su.c (the only user)