Match exactly on root username

So if someone decide to have a user called "noroot", or anything, this
doesn't trigger the warning by error.