enable only if we're in a user-run process, and we have permissions to chown.