Stronger secrecy for network-facing applications through privilege reduction