create privilege separation directory