do not drop privileges