“systemctl poweroff” doesn’t need root