make objectstore setup more robust, don't pass user to object store mounted as root