drop setkey.conf
install files using cpio
privsep enabled without chroot