actually revert my revert, the damn thing is running as root