add support "needs-root" restriction