run dnsmasq as user, not root