add option to run logstash as root