If we're not running the test as root, stick to using a virtual machine, as mkosi can't do rootless nspawn yet.