diff --git a/src/tools/CertHelper/Program.cs b/src/tools/CertHelper/Program.cs
index 2e717a7a119..33bcaf844b4 100644
--- a/src/tools/CertHelper/Program.cs
+++ b/src/tools/CertHelper/Program.cs
@@ -55,7 +55,7 @@ static async Task<int> Main(string[] args)
             Console.Error.WriteLine(ex.StackTrace);
         }
 
-        using (var store = new X509Store(StoreName.My, StoreLocation.CurrentUser, OpenFlags.ReadWrite))
+        using (var store = new X509Store(StoreName.My, StoreLocation.CurrentUser, OpenFlags.ReadOnly))
         {
             foreach(var cert in store.Certificates.Find(X509FindType.FindBySubjectName, "dotnetperf.microsoft.com", false))
             {
diff --git a/src/tools/ScenarioMeasurement/Util/ProcessHelper.cs b/src/tools/ScenarioMeasurement/Util/ProcessHelper.cs
index 7ad7b2a75d1..17ca3ac0a81 100644
--- a/src/tools/ScenarioMeasurement/Util/ProcessHelper.cs
+++ b/src/tools/ScenarioMeasurement/Util/ProcessHelper.cs
@@ -74,7 +74,7 @@ public Process RunWithNoExit()
         if (!Util.IsWindows() && RootAccess)
         {
             psi.FileName = "sudo";
-            psi.Arguments = Executable + " " + Arguments;
+            psi.Arguments = "-- " + Executable + " " + Arguments;
         }
         else
         {
@@ -191,7 +191,7 @@ public ProcessResult Run()
         if (!Util.IsWindows() && RootAccess)
         {
             psi.FileName = "sudo";
-            psi.Arguments = Executable + " " + Arguments;
+            psi.Arguments = "-- " + Executable + " " + Arguments;
         }
         else
         {