allows gateway to drop privileges