Running a slave as root isn't a *terrible* idea, if it's thought out in advance.  For example, doing so on latent slaves that are reverted to a snapshot on each startup and contain no sensitive information is probably legitimate.  Can you add a bit to the "Introduction" section of the manual discussing the ramifications of this choice, and then refer to it here?  Also, a minor note about docs - we're working to put one English sentence on each line, as that makes diffs much easier to read.