Create directory structure + drop privileges (replace later with subprocess preexec)