If things go well, I'll try to jump to 8.10 (build 8.8 without committing, build new bootstrappers from that, and then work on 8.10). While here, make it possible to build the bootstrappers with PORTS_PRIVSEP enabled (dirty and brittle, but works for me[tm]).