ensure root for installs