security: protect legacy applications from executing with insufficient privilege