drop_privilege added