more explicit about not running service as root and updated steps