proper droppings (of privileges)