privs: move drop_privileges out of xutils