dropPermissions does not drop some kinds of permissions.

This is annoying because it means that security guarantees provided by dropPermissions() do not work and the system must be assumed to be as insecure as it was prior to dropPermissions() introduction.