Start as root, use setuid