DR todo
allow admin user setup to be run as root

but only if manually requested