Only use narrowest needed set of permissions in doPrivileged calls.