isaacs: i can set unsafe-perm i guess and use sudo -u for now to work around