Use minimally-invasive approach to allowing build by non-root user