As above, should be owned by root.