run: fix how we run the first time as root

Just ask for the user. Next time, we will have sudo and this will work
as expected.
shell: handle the case where primary group is not named after user