Add a paragraph on dropping privs

diff --git a/pdns/README-dnsdist.md b/pdns/README-dnsdist.md
index 2874d3acc162eb14f8eff4d7de69bf0cf1f46f43..bf99bd2f43a577ee03aad4b2ef5b6670261ca6b0 100644 (file)
--- a/pdns/README-dnsdist.md
+++ b/pdns/README-dnsdist.md
@@ -30,6 +30,11 @@ make
 
 On other recent platforms, installing a Lua and the system C++ compiler should be enough. 
 
+`dnsdist` can drop privileges using the `--uid` and `--gid` commandline-switches
+to ensure it does not run with root privileges after binding its listen-sockets.
+It is highly recommended to create a system user and group for `dnsdist`. Note that
+most packaged versions of `dnsdist` already create this user.
+
 Packaged
 --------
 We build packages for `dnsdist` on our [repositories](https://repo.powerdns.com). In addition