drop root priveleges before exec