turn privileges back off and also remove websockets for the time being