Facilitator drop privileges
There's no need for facilitator programs (facilitator, facilitator-email-poller) to keep their privileges after they have opened their log files and read their key files.
To upload designs, you'll need to enable LFS and have an admin enable hashed storage. More information