raise privs, mask process