I think that a full suite of tests should be checked in at bare minimum. They could all be `--cfg hasroot` for now, and we may be able to configure a bot that run tests as root with this `cfg` switch (or investigate with capabilities on linux).