only op users who need ops
add Makefile