support dropping uid and running with dtrace_kernel privileges on illumos