lower privileges once listening