doc: clarify instructions on running as non-root