Upon reading the documentation and coming with JupyterHub experience, it
was natural to assume that Zeppelin should run as root, one daemon for
all the users, especially considering that one can use it with ldap.
One should put it into the documentation with big red letters: *NEVER
RUN ZEPPELIN AS ROOT !!!
*
Also, the daemon itself should check if it is running as root and die
with violent complaints if yes. This is a major security problem.
This was not obvious at all to me that each user should run his own
daemon on his account. I know at least one more place that made the same
mistake as me and runs Zeppelin under root.
