unless there is a compelling business case never run an application as root as a general security precaution