shouldn't we shellescape the RUNASROOT value?