allow webconsole injection only for root users