use user privilege dropping - new vmcloak feature