fixes for ooni-backend privilege dropping