Use root_key if auth'ing as root when token is present.

Closes #11223.