allow sudo root to run agg scripts