add dropping privileges
fix readme