The parent process is the only part that doesn't drop privileges; the others do, in the interest of non-exploitability.