allows running as non-root