add note about disallowing root user access