only drop priv if root, since will fail for other users