deny running frontend as root