switch to using non-root user (#11)