use `nobody` as the default user