don't run as 'nobody', as this causes problems with volume sharing