server config, <VirtualHost>, <Global>, <Anonymous>
1.2.9rc1 and later
The RootRevoke directive causes all root privileges to be dropped once a user is authenticated. This will also cause active transfers to be disabled, if the server is listening on a port less than 1025. Note that this only affects active transfers; passive transfers will not be blocked.