use https instead of ssh; run in priveleged mode