drop privileges
clean up config
logging