SETUSRBRM vs adopted authority

Apparently you cannot do a SETUSRBRM from your custom QSTRUPPGM just by
using adopted authority. You either have to change
- QSTRUPJD *JOBD to run under a higher profile,
- submit off a job which runs under a higher profile
- Do profile switching.

BRM4023:
Message . . . . : *SECADM required for SETUSRBRM.

Cause . . . . . : *CURRENT does not have *SECADM authority. *SECADM
authority is required to use SETUSRBRM.
Recovery . . . : Get the necessary authority from your security officer.
Then try the request again.