make sure canary user can run scripts