lock root password, fixes #3