Fix #20: if the client is run once via `sudo`, then a root-owned cache dir makes life unhappywq