initialization commands need to run as root