make sure the code is owned by root during Docker build