[nemo] root is privileged, even if it's not in that group