root has password, nobody doesn't