drop privileges
move dropping to thread