Don't assume provisioning run as root - fixes #2