Privilege drop, separation, and restricted-service operating mode in OpenBSDsha256.net·74 pts·brynet·44