reports2: make sure pdf is not owned by root