De-escalating privileges