Maybe prefer privilege shedding anyway