A method for successively reducing privilege. See chapter 7, section 2 of The Art of UNIX Programming.