disable privilege separation