allow rwx to root and disable autorestart