qemu: optionally run as root