- run cms as non-root context
- tidy-up
new published column
new published column