Fixes:

• Changing chmod in pleaseedit to use fd
• splitting do_environment into set and clean
• umask into set_environment
• renaming reset and eprivs to esc and drop
• fchown on fd
• search_path and do_dir_changes print os errors
• use seteuid/setguid
• use nofollow
• dir should be limited to range, or excluded if not specified
• use rand characters in temp file names
• limit config processing to 10MB
• valid token uses both wall and monotonic clock
• pam follows conversation
• failed edits are now cleaned upon editor exit

Thanks to Matthias Gerstner for these recommendations