Make sure DSL does not mangle absolute paths.
Make dropPriviledges a separate function.
Support both command specs.