pot without privs