Dnscrypt-proxy2 2.0.44 allows one to configure it to drop privileges after binding port 53. However, doing so causes it to fail on initialization. I got a copy of 2.0.45 from their site, and it is able to drop privileges.