fix lumberjack and make logstash run as root