Comment 7 for bug 1080846

(though, if they are owned by stack, there is no root wrap protection anymore, may as well just use plain sudo - rootwraps reason for existence is to gate access to root such that openstack services can't bypass it :))