--- a/src/main.c
+++ b/src/main.c
@@ -1408,10 +1408,10 @@ main(int argc, char *argv[])
 		    setresgid(pw->pw_gid, pw->pw_gid, pw->pw_gid) == -1 ||
 		    setresuid(pw->pw_uid, pw->pw_uid, pw->pw_uid) == -1)
 			err(1, "unable to revoke privs");
+	}
 
 		cachedir = RPKI_PATH_BASE_DIR;
 		outputdir = RPKI_PATH_OUT_DIR;
-	}
 
 	if (pledge("stdio rpath wpath cpath fattr proc exec unveil", NULL) == -1)
 		err(1, "pledge");
