user: do not call getpwnam() if user == 'root'