works as root but only one server, or nonroot (not port 80)