drop root privs once we no longer need them