pam_envoy.so: more robust privilage changing