there is an issue where `$HOME` can be weird in su/sudo situations, but it's unclear whether it's better or worse than `getpwuid(getuid())` (aka "whoami" in shell probably), and su/sudo shouldn't matter to us here.