[daemon] drop privileges