add run as root protection