Should we specify what env.user is here, or would it work to simply store the value of `env.user` before it's overwritten with root, and then restore it afterwards?