terminate plugin processes on exit, drop privs after double fork