perhaps bundle should be run as non-privileged, too