ensured commands run in root