ignore pid, sock, secrets files
fix drop privileges (order matters on FreeBSD)
flesh out srs forward/reverse logic