Lock the root account for production image