Don't require AUTH_MDP to lower permissions of the user.