disable_root option by default