ensure filth like .dbus stay out of HOME