Security

After privilege separation, two thirds of the source code runs without special privilege.