minimize privilege of created user