that have to be done as root: running builders under different uids, changing ownership of build results, and deleting paths in the store with the wrong ownership).