Since salt-call can run as any user, no privileges dropping should be done for it.