do not set root password if none given => root cannot login