split root and replication users out