Refuse to run as root except if forced