still need  -privileged to run a build / test

and sudo is still the docco standard - see #2985 (but gosh it would be nice to get rid of it :) )

@tianon