don't need the user
watcher must run as root