Change file locations, drop privs, make socket a volume