force access grants to run as root