[mapplauncherd] drop setgid from processes that are not isPrivileged()