Run as root as default, su to sandboxer later