Turning the entire effective privilege set off is followed by application code until a privilege is needed.