Use sudo, since su -l wants to exec nologin