drop privileges only in bash process, make temp files members of web server