The way "var root" is managed is no good, because in a system error (LDAP pb, or things like that), it will blow up in exception. 
So, either we manage the root in a Box, or we pass it as a paramater of the rule displayer (and charge to the caller to manage the error), but we don't use Option.get without managing the case where we can't get.