NOTE: privilege separation is turned off by default as it seems there still are issues with setsid().