vm: need root privileges to access usb directly