annotate disabled root accounts on include

Change-Id: Icc5f14314689a2c6eb6c951d57ac4d0c6eb3d2a3