Drop permissions before executing command