privledgeDrop(): add missing check