How do I drop elevated privileges in postflight?