lock root account if root password is empty

Previous rootpass default was "root". but this is unsecure.
This change will lock root account if rootpass is empty.

Still you can set root password with "rootpass" parameter.

default rootpass:
* before: root
* after: (empty)

default account setting:
* always unlock
* lock if "rootpass" is empty.