don't hardcode WWW_UID/GID