must_be_root can be called as a simple function.