Make Document::root private.

In preparation for removing it as part of making Document a Node.