drop privileges on server startup