WIP: allow sti build to run as non-root