enforce scripts to be run as root