ngx_drop_privs module for nginx