[PATCH 2/3] drop privileges to usr/grp specified at build time