Switch centos6 config to lock root user by default

We used to let people log in as root and set up an ssh key for that
user.  The move to logging in as "ec2-user" + set up of sudoers
means that we should lock the root user's password.

See CVS-2013-2069 for more info