allow winbindd to run as non-root so we can test it more easily