drop privileges during Settings_write()