the privilege dropping is pretty complex and is only getting worse. as I noted on the issue, on darwin (even though darwin is not affected by this bug) you can’t always rely on the setuid apis to drop privileges