ensure files owned by root and not uid as packaged