Privilege Separation

Change of Identity Request:
Terminate slave process and let the monitor create a new process with the required credentials.
All state of the child process is lost.
Solve the problem by exporting all state to parent.
New child imports state without the monitor ever touching it.

State export:
Pretty messy.
Use XDR-like data marshalling for global structures.
Does not work for dynamically allocated state.