changing gid before shedding root uid

instead of vice-versa - whoops!  logging rules.