non-root user needs to be able to write to /var/log