support running as non-root user