go back to specifying privileged on run

otherwise turbine is coupled to unix ('root' user)