fixes around superuser first launch