Merge changes Ia1ea17f6,I7c04464c,Id10efe4e into main

* changes:
  Add and use run_as::run_as_app helper
  Add and use run_as::run_as_root helper
  Minimize unsafe blocks