proxy.sh: switch user to root + keep env vars