noting that list-identity-certifiers should be running as a non-privileged user.