more secure ghost (run as non root)