Making the CA daemon not run with root privileges does not solve the "ln -s /etc/passwd ~/.plan" problem.