move check 'run as root' to check it only for actions needing this check