drop privileges before running, if configured to do so