added mitigation for running unprivileged