user and reject anything that does not fit your strict requirements.
When dropping privileges, ensure that they have been dropped successfully to avoid
CWE-273. As protection mechanisms in the environment get stronger, privilegedropping calls may fail even if it seems like they would always succeed.
If circumstances force you to run with extra privileges, then determine the minimum