Please, please, please, configure stand-alone Crowd so that it runs as an unprivileged user out of the box. If that can't be done or as a stop-gap until it can be done, provide documentation on how to do this.