drop privileges after binding