now you can only set policies for the current uid...what about root?