gracefully handle readonly files when not root