only allow to be run as root
do not need to run as root