don't downgrade to local user, use sudo -u